IONOS US incident
Critical Security Update: WordPress Core Vulnerability (CVE-2026-87902)
Resolved after 2 days 10 hours, affecting Wordpress Hosting and Wordpress Pro, on September 22, 2026.
A critical security vulnerability affects WordPress versions 4.7.0 through 7.1.1, which can allow remote code execution under specific conditions. Managed WordPress Customers No action needed:IONOS is automatically patching your site and deploying proactive security measures Self-Managed WordPress Customers Action required: Update WordPress immediately to the latest version More updates will be posted here as new information becomes available.
Affected components
Update timeline
- identified Sep 22, 2026, 09:37 PM UTC
A critical security vulnerability affects WordPress versions 4.7.0 through 7.1.1, which can allow remote code execution under specific conditions. Managed WordPress Customers No action needed:IONOS is automatically patching your site and deploying proactive security measures Self-Managed WordPress Customers Action required: Update WordPress immediately to the latest version More updates will be posted here as new information becomes available.
- resolved Sep 25, 2026, 07:56 AM UTC
The issue has been resolved.
Your product runs on more than IONOS US
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services